[PR] [fix][build] Remove jetty-server from avroTools Gradle configuration used in build [pulsar]

["lhotari (via GitHub)" <gi...@apache.org>]

lhotari opened a new pull request, #25784:
URL: https://github.com/apache/pulsar/pull/25784

   ### Motivation
   
   There are GitHub Dependabot security alerts about Jetty 9. The source of them is this build logic:
   
   https://github.com/apache/pulsar/blob/a1613bc2e5fd26cc16fc95b4a3c61bc5e1ae090d/pulsar-client/build.gradle.kts#L90-L104
   
   This is used in pulsar-client's build to generate avro classes from the schema for tests.
   
   The dependency enforcement solution in the Pulsar Gradle build doesn't apply to all Gradle configurations. It's only applied to `implementation` (and configurations extending `implementation`). `avroTools` is an independent configuration.
   
   ### Modifications
   
   Exclude `jetty-server` dependency since it's not needed at all.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [fix][build] Remove jetty-server from avroTools Gradle configuration used in build [pulsar]

["lhotari (via GitHub)" <gi...@apache.org>]

lhotari merged PR #25784:
URL: https://github.com/apache/pulsar/pull/25784


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org